Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
File:                     FYuWZk-xya7us9KHB_h3_iN7Atw.mft (raw, json)
Hash identifier:          9ELwvoLzZlzU7CKTCPQ5PnBvp1ez8snqICaQG+TuBwA=
Subject key identifier:   45:96:B7:90:4C:A5:4A:3E:4F:B6:4A:DD:4F:81:28:3C:EB:11:FE:6F
Authority key identifier: 15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC
Certificate issuer:       /CN=A91C08EE/serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
Certificate serial:       02AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
Manifest number:          0295
Signing time:             Sun 01 Mar 2026 02:26:04 +0000
Manifest this update:     Sun 01 Mar 2026 02:26:04 +0000
Manifest next update:     Sun 08 Mar 2026 02:26:04 +0000
Files and hashes:         1: FYuWZk-xya7us9KHB_h3_iN7Atw.crl (hash: bmVBDXMEm/1s7BNAygt7vPvjnfaZ2Ep3kYzEkPbGPa8=)
                          2: 378FB0D25B9211EEB8E7453DC4F9AE02.roa (hash: +vXql9o+JG8jXikaEwvUdgbDzT28NGoMtEaj6InzCZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl
                          rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C08EE, serialNumber=158B96664FB1C9AEEEB3D28707F877FE237B02DC
        Validity
            Not Before: Mar  1 02:26:04 2026 GMT
            Not After : Mar  8 02:26:04 2026 GMT
        Subject: CN=69a3a3bc-1b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:9d:a2:4a:5b:6e:71:11:f2:2c:04:16:2a:
                    86:95:77:4a:7b:a3:d0:1d:be:33:dc:3d:e1:e4:fc:
                    42:92:95:e9:f4:15:f0:d0:13:45:b5:06:d8:de:61:
                    19:a1:50:14:3f:d7:b3:92:b7:8e:01:56:99:a3:be:
                    63:6d:22:5f:6b:e5:95:ac:e9:1a:bc:ae:a9:84:f5:
                    bd:58:21:45:23:b1:7a:90:10:2f:a8:a3:a7:e4:29:
                    9d:28:7a:7b:79:a4:2b:77:0d:0b:a1:e8:64:7d:02:
                    54:fd:87:c8:63:f6:d4:46:c4:1e:7e:b0:98:4e:75:
                    b7:aa:13:72:55:30:46:4c:fb:db:54:0e:83:3c:86:
                    de:b8:66:c1:93:9b:dc:ec:c6:25:63:56:38:16:1f:
                    96:94:bb:df:cf:b7:5a:14:1e:b7:14:91:76:78:d1:
                    ca:db:08:93:0f:29:ad:d9:42:6c:82:97:e4:bf:74:
                    2e:12:40:1b:c5:aa:b0:c5:d5:b8:02:c8:d2:15:cb:
                    39:5c:a9:80:29:dd:69:aa:56:7f:29:12:21:dd:9f:
                    ef:a5:f5:78:8f:a9:29:1b:9c:ad:92:66:b0:3f:2e:
                    de:03:5d:6c:81:9a:30:ad:73:cd:74:8b:e9:8b:a8:
                    04:bc:31:a0:52:31:f3:35:22:67:16:e9:8f:e7:4c:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:96:B7:90:4C:A5:4A:3E:4F:B6:4A:DD:4F:81:28:3C:EB:11:FE:6F
            X509v3 Authority Key Identifier:
                keyid:15:8B:96:66:4F:B1:C9:AE:EE:B3:D2:87:07:F8:77:FE:23:7B:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FYuWZk-xya7us9KHB_h3_iN7Atw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C08EE/53C678D6430011ED840B3357C4F9AE02/FYuWZk-xya7us9KHB_h3_iN7Atw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:53:44:f3:30:c1:c1:5d:62:fc:c2:85:82:89:2e:f8:ed:92:
         d6:56:b2:ba:88:9a:94:5b:c8:4f:f5:e2:fe:99:6b:e2:a8:50:
         f6:58:c3:5e:2f:8a:55:6e:1b:38:70:20:d8:ae:c8:9c:47:0a:
         fd:cb:08:c2:3d:3d:f7:6f:83:0a:13:a3:e9:09:70:f1:5e:7a:
         00:33:27:37:ad:8a:cb:79:cf:fd:4d:74:fc:b5:ca:72:75:fe:
         77:60:22:99:e9:e1:d5:28:31:b6:83:2a:f2:ff:c5:a5:b5:6c:
         57:9b:89:1a:06:75:8b:c6:24:d0:06:a2:f3:d8:fc:78:bb:5f:
         0f:53:9f:47:24:aa:d2:28:d6:a1:89:a5:a8:00:71:f5:3a:da:
         dd:59:1f:d4:31:73:72:76:39:eb:e8:35:a4:d3:50:e0:4c:21:
         9c:4e:18:6c:ff:12:68:59:7f:4d:67:5d:16:c3:78:2c:07:02:
         d9:4a:39:ac:82:78:fe:de:8c:93:36:51:ac:d8:1a:1f:4a:84:
         8d:1f:f0:dd:f5:21:06:17:b0:01:8f:c2:f4:b0:96:ad:8d:ef:
         26:d1:0e:f5:35:8f:60:0d:69:cb:6a:5c:59:ee:85:fc:26:d1:
         1f:00:65:1f:f4:a8:62:c2:c0:af:4e:43:57:3d:b1:6b:94:2f:
         80:0c:94:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:59 2026 by rpki-client